/[pdpsoft]/nl.nikhef.pdp.fetchcrl/trunk/fetch-crl.cnf.example
ViewVC logotype

Diff of /nl.nikhef.pdp.fetchcrl/trunk/fetch-crl.cnf.example

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

fetchcrl/fetch-crl.cnf.example revision 1758 by davidg, Fri Jun 11 15:39:04 2010 UTC nl.nikhef.pdp.fetchcrl/trunk/fetch-crl.cnf.example revision 2606 by davidg, Mon Feb 25 16:00:22 2013 UTC
# Line 6  Line 6 
6  # use SEMICOLON (;) or \001 (^A) as list separators in values  # use SEMICOLON (;) or \001 (^A) as list separators in values
7  #  #
8  # ---------------------------------------------------------------------------  # ---------------------------------------------------------------------------
9    # cfgdir sets the directory where subordinate configuration files are
10    # found. These files are read in addition to the main config file.
11    # The default directory is /etc/fetch-crl.d/ and is used by default, so
12    # to suppress this behaviour set this to the empty value ""
13    #
14    # cfgdir = /etc/fetch-crl.d
15    #
16    # ---------------------------------------------------------------------------
17  # infoset set the location where the meta-data files (.info or .crl_url)  # infoset set the location where the meta-data files (.info or .crl_url)
18  # are help by default. All trust anchors listed there are processes, so  # are help by default. All trust anchors listed there are processes, so
19  # to suppress this behaviour set this to the empty value ""  # to suppress this behaviour set this to the empty value ""
# Line 93  Line 101 
101  #  #
102  # catemplate  = @ALIAS@.pem; @ALIAS@.@R@; @ANCHORNAME@.@R@  # catemplate  = @ALIAS@.pem; @ALIAS@.@R@; @ANCHORNAME@.@R@
103  #  #
104    # When @HASH@ (c_hash from default OpenSSL version as based on the retrieved
105    # CRL) is used in this template list, a CRL will *always* be retrieved first,
106    # even if no corresponding trust anchor is found later. Use of @HASH@ is
107    # only recommended in case the name of the crl_url or info file is different
108    # from the name of the trust anchor.
109    #
110    # catemplate  = @ALIAS@.pem; @ALIAS@.@R@; @ANCHORNAME@.@R@; @HASH@.0
111    #
112  # ---------------------------------------------------------------------------  # ---------------------------------------------------------------------------
113  # opensslmode is used if the openssl format for output is specified and also  # opensslmode is used if the openssl format for output is specified and also
114  # OpenSSL version 1.0.0 or higher are used. If so, you can have the CRL data  # OpenSSL version 1.0.0 or higher are used. If so, you can have the CRL data
# Line 111  Line 127 
127  # nonssverify  # nonssverify
128  #  #
129  # ---------------------------------------------------------------------------  # ---------------------------------------------------------------------------
130    # use up to <parallelism> thread in parallel to retrieve and install CRLs
131    # This feature is likely NOT COMPATIBLE with the use of NSS databases for
132    # CRLs, due to thread contention issues
133    #
134    # parallelism = 5
135    #
136    # ---------------------------------------------------------------------------
137  # wait up to <randomwait> seconds before doing anything at all  # wait up to <randomwait> seconds before doing anything at all
138  # useful for randoming the start time and download from cron across the world  # useful for randoming the start time and download from cron across the world
139  #  #
# Line 153  Line 176 
176  # noerrors  # noerrors
177  #  #
178  # ---------------------------------------------------------------------------  # ---------------------------------------------------------------------------
179    # noquiet ignores any "-q" options on the commandline and honours the
180    # verbosity set here even if -q is specified
181    #
182    # noquiet
183    #
184    # ---------------------------------------------------------------------------
185  # agingtolerance sets the time in hours before retrieval warnings become  # agingtolerance sets the time in hours before retrieval warnings become
186  # errors for a CRL retrieval. If you also suppress warnings, you will  # errors for a CRL retrieval. If you also suppress warnings, you will
187  # prevent any annoying messages for a trust anchor for up to <hrs> hours.  # prevent any annoying messages for a trust anchor for up to <hrs> hours.
# Line 196  Line 225 
225  # stateless  # stateless
226  #  #
227  # ---------------------------------------------------------------------------  # ---------------------------------------------------------------------------
228    # By default, the perl LWP library does not use IPv6 network sockets. The
229    # perl module Net::INET6GLUE::INET6_as_INET can mitigate this behaviour
230    # by re-mapping all INET socket calls to INET6 socket calls. If you have
231    # the Net::INET6Glue module installed, you may enable this flag in the
232    # cofiguration. Note: the Net::INET6Glue module MUST be installed for this
233    # flag to work. Installation of this module is options and it does not
234    # ship by default with fetch-crl3. You can obtain this module from CPAN.
235    #
236    # inet6glue
237    #
238    # ---------------------------------------------------------------------------
239  # override version or packager to influence the User-Agent header in http  # override version or packager to influence the User-Agent header in http
240  # requests. But please leave them alone  # requests. But please leave them alone
241  # version = 3.0  # version = 3.0
# Line 238  Line 278 
278  #nowarnings  #nowarnings
279  #  #
280  # ---------------------------------------------------------------------------  # ---------------------------------------------------------------------------
281    # Do not process symlinked meta-data, preventing triple downloads with
282    # the new-format IGTF distribution before release 1.37 (1.33 up to and
283    # including 1.36 also symlinked the .info file to the hash names)
284    #nosymlinks
285    #
286    # ---------------------------------------------------------------------------
287  # You can also (un) set the following on a per-trust anchor basis:  # You can also (un) set the following on a per-trust anchor basis:
288  #  #
289  # (no)prepend_url (no)postpend_url (no)http_proxy (no)statedir  --  # (no)prepend_url (no)postpend_url (no)http_proxy (no)statedir  --

Legend:
Removed from v.1758  
changed lines
  Added in v.2606

grid.support@nikhef.nl
ViewVC Help
Powered by ViewVC 1.1.28